git-lfs

3 results · Feed

• High 8.6
  CVE-2025-26625

  Git LFS may write to arbitrary files via crafted symlinks

  Git LFS is a Git extension for versioning large files. In Git LFS versions 0.5.2 through 3.7.0, when populating a Git repository's working tree with the contents of Git LFS objects, certain Git LFS commands may write to files visible outside the current Git w…

  git-lfs git-lfs github.com/git-lfs/git-lfs github.com/git-lfs/git-lfs/v3 Debian Ubuntu Alpine Go
  Oct 17, 2025
• High 7.5
  CVE-2021-38561

  golang.org/x/text/language Out-of-bounds Read vulnerability

  golang.org/x/text/language in golang.org/x/text before 0.3.7 can panic with an out-of-bounds read during BCP 47 language tag parsing. Index calculation is mishandled. If parsing untrusted user input, this can be used as a vector for a denial-of-service attack.

  golang-golang-x-text golang-golang-x-text golang-x-text golang.org/x/text Debian Ubuntu Alpine Go
  Dec 26, 2022
• High 7.5
  CVE-2022-27191

  golang.org/x/crypto/ssh Denial of service via crafted Signer

  The golang.org/x/crypto/ssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go allows an attacker to crash a server in certain circumstances involving AddHostKey.

  go podman golang.org/x/crypto golang-go.crypto Debian Ubuntu Alpine Go
  Mar 18, 2022